Critical Vulnerabilities CVE-2026-79657 and CVE-2026-78568 Disclosed
Article Content
- •CVE-2026-79657 and CVE-2026-78568 have CVSS scores of 9.80 and 9.30, indicating critical severity.
- •Both vulnerabilities allow remote exploitation with low complexity and no user interaction.
- •Immediate patching is recommended as both vulnerabilities were disclosed on August 25, 2026.
Two critical vulnerabilities, CVE-2026-79657 and CVE-2026-78568, were published on August 25, 2026, with CVSS scores of 9.80 and 9.30 respectively. Both vulnerabilities allow remote access with low complexity and no user interaction required, impacting confidentiality, integrity, and availability. They are categorized as critical due to their potential for severe exploitation. Affected systems include those that utilize the software associated with these CVEs. Security teams are advised to prioritize patching these vulnerabilities immediately. No active exploitation has been confirmed yet, but the high severity warrants urgent attention. The vulnerabilities were disclosed by INCIBE-CERT, indicating a reliable source of information.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (7)
Following this threat?
Track CVE-2026-78435 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active… 
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…